From 9ea603182b29034f050ec1e46fcaf6e67128526e Mon Sep 17 00:00:00 2001
From: sunil-lakshman <104969541+sunil-lakshman@users.noreply.github.com>
Date: Tue, 14 Apr 2026 15:14:55 +0530
Subject: [PATCH 1/2] fix: mark manifest-declared broadcast receivers as
 non-exported to prevent other apps from sending spoofed broadcasts

---
 CHANGELOG.md                              | 6 ++++++
 contentstack/build.gradle                 | 2 +-
 contentstack/src/main/AndroidManifest.xml | 4 ++--
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 168be0f1..a5487c7a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # CHANGELOG
 
+## Version 4.2.1
+
+### Date: 14-Apr-2026
+
+- Security: mark manifest-declared broadcast receivers as non-exported to prevent other apps from sending spoofed broadcasts.
+
 ## Version 4.2.0
 
 ### Date: 02-Mar-2026
diff --git a/contentstack/build.gradle b/contentstack/build.gradle
index c2e1c461..3687fbc6 100755
--- a/contentstack/build.gradle
+++ b/contentstack/build.gradle
@@ -7,7 +7,7 @@ plugins {
 ext {
     PUBLISH_GROUP_ID = 'com.contentstack.sdk'
     PUBLISH_ARTIFACT_ID = 'android'
-    PUBLISH_VERSION = '4.2.0'
+    PUBLISH_VERSION = '4.2.1'
 }
 
 android {
diff --git a/contentstack/src/main/AndroidManifest.xml b/contentstack/src/main/AndroidManifest.xml
index d94c12f5..e72bd55c 100755
--- a/contentstack/src/main/AndroidManifest.xml
+++ b/contentstack/src/main/AndroidManifest.xml
@@ -10,7 +10,7 @@
         <receiver
             android:name="com.contentstack.sdk.ConnectionStatus"
             android:enabled="true"
-            android:exported="true">
+            android:exported="false">
             <intent-filter>
                 <action android:name="android.net.conn.CONNECTIVITY_CHANGE" />
             </intent-filter>
@@ -18,7 +18,7 @@
         <receiver
             android:name="com.contentstack.sdk.ClearCache"
             android:enabled="true"
-            android:exported="true">
+            android:exported="false">
             <intent-filter>
                 <action android:name="StartContentStackClearingCache" />
             </intent-filter>

From 5f5373d424fc9fb6e1914c47e94625d9a8cbde34 Mon Sep 17 00:00:00 2001
From: sunil-lakshman <104969541+sunil-lakshman@users.noreply.github.com>
Date: Tue, 14 Apr 2026 15:16:41 +0530
Subject: [PATCH 2/2] Updated changelog file

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a5487c7a..3d3c46ed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,7 @@
 
 ## Version 4.2.1
 
-### Date: 14-Apr-2026
+### Date: 20-Apr-2026
 
 - Security: mark manifest-declared broadcast receivers as non-exported to prevent other apps from sending spoofed broadcasts.